Inadequate input filtering leads to multiple XSS vulnerabilities. Additionally, the default filtering settings could potentially allow users of the default Administrator user group to perform a XSS attack.
CVE-2018-11326
Part of security release: 3.8.8
This vulnerability affects the following application versions:
- Joomla 3.7.0
- Joomla 3.7.0-rc1
- Joomla 3.7.0-rc2
- Joomla 3.7.0-rc3
- Joomla 3.7.0-rc4
- Joomla 3.7.1
- Joomla 3.7.1-rc1
- Joomla 3.7.1-rc2
- Joomla 3.7.2
- Joomla 3.7.3
- Joomla 3.7.3-rc1
- Joomla 3.7.3-rc2
- Joomla 3.7.4
- Joomla 3.7.4-rc1
- Joomla 3.7.5
- Joomla 3.8.0
- Joomla 3.8.0-rc1
- Joomla 3.8.1
- Joomla 3.8.1-rc
- Joomla 3.8.2
- Joomla 3.8.2-rc
- Joomla 3.8.3
- Joomla 3.8.3-rc
- Joomla 3.8.4
- Joomla 3.8.4-rc
- Joomla 3.8.4-rc2
- Joomla 3.8.5
- Joomla 3.8.5-rc
- Joomla 3.8.6
- Joomla 3.8.6-rc1
- Joomla 3.8.7
- Joomla 3.8.7-rc
- Joomla 3.8.8-rc